A joint-stock company
- Country
- Turkey
- Fine
- 50,000 TRY
- Date
- 2019-05-31
- Sector
- Technical and Organisational Sector
- Articles
- Article 5,6 and 12 of the DPL
Insufficient technical and organisational measures to ensure information security + Non-compliance with general data processing principles
The KVKK has stated in its decision that data controller shall not send any commercial purposed emails to data subjects without their explicit consent. That's why the KVKK has issued a penalty based on the lack of technical and organisational measures which allowed employees to send such emails. Authority: Turkish Data Protection Authority (KVKK)
Source: https://www.kvkk.gov.tr/Icerik/5495/2019-162
Reported by: Mehmet Gün